VYPR
Unrated severityNVD Advisory· Published Feb 21, 2006· Updated Apr 16, 2026

CVE-2006-0827

CVE-2006-0827

Description

Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected products

12
  • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
  • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.